SUSE CVE-2025-22110

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: Initialize ctx to avoid memory allocation error It is possible that ctx in nfqnlbuildpacketmessage could be used before it is properly initialize, which is only initialized by nfqnlgetsksecctx. This pat...

CVE-2025-22110 netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: Initialize ctx to avoid memory allocation error It is possible that ctx in nfqnlbuildpacketmessage could be used before it is properly initialize, which is only initialized by nfqnlgetsksecctx. This pat...

CVE-2025-22110

Summary: CVE-2025-22110 affects the Linux kernel’s netfilter nfnetlink_queue component. The root cause is use of an uninitialized context variable (ctx/lsmctx) in nfqnl_build_packet_message(), which could be used before safe initialization; the patch initializes the lsmctx to a safe value at decl...

CVE-2024-57947

A buffer overflow vulnerability exists in the Linux kernel. After each round in the map search step, the result and the fill map are swapped. If a set where f-bsize of the first element is smaller than m-bsizemax, those one-bits are leaked into future rounds result map, resulting in loss of syste...